IAB TCF and the Global Privacy Platform, explained for product teams
TCF strings are how many European ad ecosystems hear consent. GPP extends that idea to US state signals. Your CMP should speak both.
The IAB Europe Transparency and Consent Framework encodes purposes, special features, and vendor IDs into a TC string that bidders and tags can parse. It is not a substitute for GDPR compliance, but it is how large parts of the open web operationalize consent.
The IAB’s Global Privacy Platform (GPP) adds sections for US state privacy signals so a single string can carry more than EU TCF.
Use the framework; own the policy
Load a Global Vendor List, map only the vendors you actually use, and still write a human-readable notice. A TCF string without a truthful banner is just a compact lie.
Educational overview only — not legal advice. Confirm requirements with counsel for your products and markets.
